Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.

Windows Kernel Information Disclosure Vulnerability

Windows Common Log File System Driver Information Disclosure Vulnerability

Windows CDP User Components Information Disclosure Vulnerability

Windows Update Orchestrator Service Information Disclosure Vulnerability

Windows Installer Information Disclosure Vulnerability

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.

Azure Sphere Information Disclosure Vulnerability

Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Event Tracing for Windows Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information Disclosure Vulnerability'.

Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally.

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

Windows Kernel-Mode Driver Information Disclosure Vulnerability

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

Windows Authentication Information Disclosure Vulnerability

Windows CoreMessaging Information Disclosure Vulnerability

Use of uninitialized resource in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally.

Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally.

Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally.

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.

A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient file permission restrictions. An attacker could exploit this vulnerability by sending a crafted command from the local CLI to the application. A successful exploit could allow the attacker to read arbitrary files on the underlying OS of the affected device. The attacker would need to have valid user credentials to exploit this vulnerability.

Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally.

Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally.